A pharmaceutical plant has a legacy control system that cannot be patched. The risk assessment shows a high risk of a worm spreading through the control network via USB drives. The plant cannot afford to replace the system. Which mitigation strategy is most effective while maintaining production?

Enforce a strict USB device control policy and use air-gapped engineering workstations.

Install antivirus on all legacy controllers.

Disable all USB ports on the control system hardware.

Increase the frequency of backups to reduce the impact of a worm.

A manufacturing plant has a flat network where the IT and OT networks are not segmented. An engineer recently connected a personal laptop to the OT network to troubleshoot a PLC, and the laptop was infected with malware. Which combination of threats and vulnerabilities does this scenario illustrate?

External attacker and insecure remote access

Denial-of-service attack and lack of redundancy

Legacy protocol vulnerability and physical security weakness

Insider threat (unintentional) and lack of network segmentation

A refinery has implemented a risk monitoring program that includes weekly vulnerability scans and monthly penetration tests. However, the security team is concerned that the monitoring does not detect all changes to the control system configuration. What additional measure would best improve risk monitoring?

Disable all remote access to the control network.

Implement a configuration management database (CMDB) and track changes to all ICS assets.

Replace all legacy protocols with secure alternatives.

Increase the frequency of vulnerability scans to daily.

After completing a risk assessment for a chemical plant, the security team must present findings to the plant manager and the board. The manager cares about safety and operational continuity, while the board focuses on financial exposure. What is the best way to communicate the results?

Provide a single report with technical details for all stakeholders.

Email the raw risk assessment data to all stakeholders.

Focus only on safety impacts and omit financial figures.

Present a high-level summary with risk rankings and potential business impact, with technical details in appendices.

When communicating risk information to operational teams in an ICS/SCADA environment, what is the most important consideration?

Using highly technical jargon to ensure precision

Focusing only on risks that have already caused incidents

Sharing all risk details with every employee regardless of role

Presenting risks in a way that is understandable and relevant to their operational context

EC-CouncilICS/SCADA Cybersecurity

Domain 1Objective 4

Risk Management in ICS/SCADA ICSSCADA Practice Questions (Page 5)

Part of the Introduction to ICS/SCADA Network Defense domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

7concepts

Questions 21–25

21expert · hard
A pharmaceutical plant has a legacy control system that cannot be patched. The risk assessment shows a high risk of a worm spreading through the control network via USB drives. The plant cannot afford to replace the system. Which mitigation strategy is most effective while maintaining production?
Select an answer first
22application · medium
A manufacturing plant has a flat network where the IT and OT networks are not segmented. An engineer recently connected a personal laptop to the OT network to troubleshoot a PLC, and the laptop was infected with malware. Which combination of threats and vulnerabilities does this scenario illustrate?
Select an answer first
23expert · hard
A refinery has implemented a risk monitoring program that includes weekly vulnerability scans and monthly penetration tests. However, the security team is concerned that the monitoring does not detect all changes to the control system configuration. What additional measure would best improve risk monitoring?
Select an answer first
24application · medium
After completing a risk assessment for a chemical plant, the security team must present findings to the plant manager and the board. The manager cares about safety and operational continuity, while the board focuses on financial exposure. What is the best way to communicate the results?
Select an answer first
25foundation · easy
When communicating risk information to operational teams in an ICS/SCADA environment, what is the most important consideration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.

Risk Management in ICS/SCADA ICSSCADA Practice Questions (Page 5)

Questions 21–25

A pharmaceutical plant has a legacy control system that cannot be patched. The risk assessment shows a high risk of a worm spreading through the control network via USB drives. The plant cannot afford to replace the system. Which mitigation strategy is most effective while maintaining production?

After completing a risk assessment for a chemical plant, the security team must present findings to the plant manager and the board. The manager cares about safety and operational continuity, while the board focuses on financial exposure. What is the best way to communicate the results?

When communicating risk information to operational teams in an ICS/SCADA environment, what is the most important consideration?

Keep studying — Introduction to ICS/SCADA Network Defense